All, A system has the Security Event logs filling up with Event ID 560s! 100s are written with the same time stamp. The user involved has restricted privileges. Has anyone had this problem that can help resolve this issue. What Is the Accesses list telling us? Could this be an Audit configuration in GPO? The screenshot is a sample. Thanks Bob Bob Schneider L3 Communications/ILEX Systems IAVA Support 732-530-8444 x3503 mailto:robert.schneider@xxxxxxxx <mailto:robert.schneider@xxxxxxxx>
Attachment:
image001.png
Description: PNG image
Attachment:
image002.jpg
Description: JPEG image